csirt@kutim:~/threat-intel/cve/CVE-2020-36518

Katalog CVE

CVSS 7.5 · High EPSS 4,9%

Kerentanan Out-of-bounds Write pada fasterxml jackson-databind, oracle big data spatial and graph +27 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.

Rincian

Terbit di NVD
11 Maret 2022
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-787: Out-of-bounds Write
EPSS (30 hari)
4,9% peluang dieksploitasi; lebih tinggi dari 91,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
fasterxml jackson-databind Semua versi sebelum 2.12.6.1
fasterxml jackson-databind Versi 2.13.0 hingga sebelum 2.13.2.1
oracle big data spatial and graph Semua versi sebelum 23.1
oracle coherence Versi 14.1.1.0.0
oracle commerce platform Versi 11.3.0
oracle commerce platform Versi 11.3.1
oracle commerce platform Versi 11.3.2
oracle communications billing and revenue management Versi 12.0.0.4.0 hingga 12.0.0.6.0
oracle communications cloud native core binding support function Versi 22.1.3
oracle communications cloud native core console Versi 1.9.0
oracle communications cloud native core network repository function Versi 22.1.2
oracle communications cloud native core network repository function Versi 22.2.0
oracle communications cloud native core network slice selection function Versi 22.1.0
oracle communications cloud native core network slice selection function Versi 22.1.1
oracle communications cloud native core security edge protection proxy Versi 22.1.1
oracle communications cloud native core service communication proxy Versi 22.2.0
oracle communications cloud native core unified data repository Versi 22.2.0
oracle financial services analytical applications infrastructure Versi 8.0.7 hingga 8.1.0.0
oracle financial services analytical applications infrastructure Versi 8.1.1.0
oracle financial services analytical applications infrastructure Versi 8.1.2.0
oracle financial services analytical applications infrastructure Versi 8.1.2.1
oracle financial services behavior detection platform Versi 8.1.1.0 hingga 8.1.2.1
oracle financial services behavior detection platform Versi 8.0.7.0.0
oracle financial services behavior detection platform Versi 8.0.8
oracle financial services crime and compliance management studio Versi 8.0.8.2.0
oracle financial services crime and compliance management studio Versi 8.0.8.3.0
oracle financial services enterprise case management Versi 8.1.1.0 hingga 8.1.2.1
oracle financial services enterprise case management Versi 8.0.7.1
oracle financial services enterprise case management Versi 8.0.7.2
oracle financial services enterprise case management Versi 8.0.8.0
oracle financial services enterprise case management Versi 8.0.8.1
oracle financial services trade-based anti money laundering Versi 8.0.7
oracle financial services trade-based anti money laundering Versi 8.0.8
oracle global lifecycle management nextgen oui framework Semua versi sebelum 13.9.4.2.2
oracle global lifecycle management nextgen oui framework Versi 13.9.4.2.2
oracle global lifecycle management opatch Semua versi sebelum 12.2.0.1.30
oracle graph server and client Semua versi sebelum 22.2.0
oracle health sciences empirica signal Versi 9.1.0.5.2
oracle peoplesoft enterprise peopletools Versi 8.58
oracle peoplesoft enterprise peopletools Versi 8.59
oracle primavera gateway Versi 17.12.0 hingga 17.12.11
oracle primavera gateway Versi 18.8.0 hingga 18.8.14
oracle primavera gateway Versi 19.12.0 hingga 19.12.13
oracle primavera gateway Versi 20.12.0 hingga 20.12.18
oracle primavera gateway Versi 21.12.0 hingga 21.12.1
oracle primavera p6 enterprise project portfolio management Versi 17.12.0.0 hingga 17.12.20.4
oracle primavera p6 enterprise project portfolio management Versi 18.8.0.0 hingga 18.8.25.4
oracle primavera p6 enterprise project portfolio management Versi 19.12.0 hingga 19.12.19.0
oracle primavera p6 enterprise project portfolio management Versi 20.12.0.0 hingga 21.12.4.0
oracle primavera unifier Versi 17.0 hingga 17.12
oracle primavera unifier Versi 18.0
oracle primavera unifier Versi 19.12
oracle primavera unifier Versi 20.12
oracle primavera unifier Versi 21.12
oracle retail sales audit Versi 15.0.3.1
oracle sd-wan edge Versi 9.0
oracle sd-wan edge Versi 9.1
oracle spatial studio Semua versi sebelum 20.1.0
oracle utilities framework Versi 4.3.0.5.0
oracle utilities framework Versi 4.3.0.6.0

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 75 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.